After 5-years of legislative back and forth, India passed its new comprehensive privacy law, the Digital Personal Data Protection (“DPDP”) Act, last month.
This week, India’s Minister of State for Electronics and IT said that companies will be given around a year’s time to comply with the Act (though certain organizations like small companies or start-ups may have more time). Given the number of important differences under the Act when compared to the EU’s GDPR or recent US state privacy laws, organizations should start working towards compliance with the Act now.
To give companies a head start, our friends at Kochhar & Co have put together a checklist of the core obligations under the Act.
Our thanks to Stephen Mathias over at Kochar & Co for this valuable resource!
SUMMARY OF REQUIREMENTS OF INDIA’S NEW
DIGITAL PERSONAL DATA PROTECTION ACT
